FBI Blames North Korea for Over $6 Billion Binance Theft
The FBI attributes the theft of more than $6 billion in crypto from Binance to North Korea's TraderTraitor and asks service providers to block laundering flows.
The FBI has attributed the theft of more than $6 billion in virtual assets from the crypto exchange Binance to North Korea. Tree News relayed the attribution, citing Reuters, and several other outlets carried the same headline. Watcher.Guru described it as an FBI confirmation of North Korean responsibility.
The sources differ on the size of the loss. Tree News, unfolded and The Defiant use wording of "more than $6 billion" or "$6 billion-plus." Watcher.Guru gives a specific figure of $6.3 billion. None of the sources provided here explain how that figure was calculated.
What the agencies said
According to Wu Blockchain, the FBI identified the malicious cyber activity as TraderTraitor. The FBI, the US Secret Service and IRS Criminal Investigation said they had seen the attackers convert the stolen assets mainly into ETH. The agencies expect further laundering through DeFi protocols and instant swap services.
The Defiant reported that the bureau named TraderTraitor and asked for blocks along the laundering trail. Wu Blockchain said the FBI also published a list of addresses that are run by, or closely tied to, the attackers. The list covers addresses that currently hold stolen assets and others that held them in the past.
A call for blocking transactions
The agencies urged a wide set of crypto businesses to act. According to Wu Blockchain, these include THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms and other virtual asset service providers. The request is to block transactions that involve, or come from, the addresses the attackers used to launder the funds.
The sources do not say whether any of these groups have agreed to comply. They also do not say how much of the stolen money has been moved or frozen so far.
Why it matters and what to watch
For traders, the main practical point is the laundering path. Because the attackers are converting mainly into ETH and are expected to use DeFi and instant swaps, activity on those routes may draw closer scrutiny. Any service that follows the FBI's request could block or flag transactions tied to the published addresses. That could affect users whose funds touch those addresses, though the sources do not describe any such cases.
The Defiant also noted that Binance kept Nov. 1 as its target date for restarting withdrawals. BWEnews timestamped its post of the Tree News item 2026-11-01. The sources do not confirm whether withdrawals have resumed. Traders may want to check Binance's own announcements for that status.
Other things to watch include updates to the FBI's address list, whether more platforms say they are blocking the flagged addresses, and whether the agencies give a more precise loss figure than the "more than $6 billion" in most reports.
Sources
- FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE - RTRS Tree News
- Tree News: FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE - RTRS BWEnews
- FBI confirms North Korea is responsible for the $6,300,000,000 Binance crypto hack Watcher.Guru
- FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTO EXCHANGE BINANCE unfolded
- FBI Attributes $6 Billion-Plus Binance Hack to North Korea The Defiant
- FBI Attributes Over $6B Binance Hack to North Korea, Urges THORNode Operators and Other Crypto Service Providers to Block Money Laundering-Linked Transactions Wu Blockchain
Written with AI assistance from the sources above and checked against them. Not investment advice.